Техническая информация
- '%APPDATA%\Roaming\SVHOST.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\Roaming\SVHOST.exe" "SVHOST.exe" ENABLE
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\606c00d3b70d5e9d056b1f3b904e2fff.exe
- %APPDATA%\Roaming\SVHOST.exe
- DNS ASK dn#.##ftncsi.com
- DNS ASK dz###o.ddns.net
- ClassName: 'Shell_TrayWnd' WindowName: ''